$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5c60131c-5b25-379c-9989-1db4b9390f7e.roa File: 5c60131c-5b25-379c-9989-1db4b9390f7e.roa (raw, json) Hash identifier: GBM7SDvOTjIEE1V3THswy3Gdt1NjGI3BGvxcyB9ecE4= Subject key identifier: E5:D6:FF:48:E6:74:48:3E:F1:6F:2D:5D:4D:75:C2:76:34:1B:87:89 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584832F00C4A65C2030284A22380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5c60131c-5b25-379c-9989-1db4b9390f7e.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 397230 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:0c:4a:65:c2:03:02:84:a2:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=3018f8fd-c082-4426-bbf8-3fe9631e8ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4d:f7:05:84:64:69:32:50:6b:72:96:f3:24: 4b:0a:52:1e:ef:a7:26:d9:76:43:e9:23:12:32:a7: dd:e9:3a:de:ab:a0:a7:91:77:25:d2:84:f3:ce:8b: da:0c:bc:86:1d:1f:9f:5d:af:84:49:21:71:0d:18: 8c:6a:3b:63:ea:42:96:bd:b3:2d:02:2e:2a:f4:93: b9:a0:54:1c:24:e2:e3:ab:7d:36:d8:49:e8:65:a2: 6b:3f:9d:c0:6e:b8:96:c4:91:69:a3:44:c3:16:0e: cb:db:fc:10:81:e0:f8:8c:01:bb:8c:d1:c2:b5:21: 3a:2d:f2:f1:3b:f2:01:ff:84:a9:60:43:a7:2b:f9: d5:a0:8c:a3:d1:50:6f:54:af:0f:68:da:46:b9:14: f3:68:32:de:a6:f9:07:d6:b8:59:94:fd:13:35:55: 51:4c:c6:0e:c4:9b:50:5c:88:75:24:5d:27:26:aa: c0:bb:47:53:8d:d9:35:d9:df:4d:1f:38:55:55:48: 32:a9:9d:3d:3e:d9:17:0d:e8:19:e6:ae:40:6a:86: 02:47:f4:e5:27:33:ac:0a:3b:e8:dc:18:8c:1a:88: a5:67:a7:a7:73:10:a2:32:95:0d:1f:d0:57:77:a1: 9d:d2:8b:e2:71:19:dd:b8:e9:15:1c:bb:45:e9:d7: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D6:FF:48:E6:74:48:3E:F1:6F:2D:5D:4D:75:C2:76:34:1B:87:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5c60131c-5b25-379c-9989-1db4b9390f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4d:45:2a:2d:01:5c:c6:76:40:4f:eb:36:fc:6d:90:f3:75: 5b:21:ab:b0:f3:c6:da:0c:06:65:91:27:a1:63:e5:7f:0d:77: 3b:6e:37:61:c0:e4:34:05:e7:f4:40:fc:c5:68:b2:95:4c:d8: 3a:7f:a6:ac:c3:37:d7:c6:81:ac:be:7e:c4:b3:db:e5:f8:05: 9f:65:36:a2:f6:a9:dd:5a:37:ef:3d:9a:22:3b:07:07:6c:5e: d3:25:ee:ff:50:48:04:f7:f9:ae:10:a2:cc:22:b2:db:43:60: 5b:ec:5c:0f:4f:df:54:d4:d9:65:10:1b:05:94:4e:5a:f5:40: 7b:64:6b:3f:9c:22:e6:4a:68:8c:b3:c5:99:5d:47:95:48:2c: 23:e6:7c:fa:b8:be:db:a5:27:f4:ec:06:e2:92:e1:36:57:f0: a7:97:1e:29:4e:42:7f:fe:4a:a2:3c:a0:44:09:21:24:7e:45: d6:ec:76:84:5f:19:7c:c7:22:95:97:c5:ed:c5:9c:b5:49:79: 72:d9:f4:9c:82:93:8c:01:f7:13:fb:f6:29:0f:d2:df:48:0d: 4e:38:56:b2:06:86:d0:65:f2:e4:8b:48:8f:15:2d:0b:86:b5: 24:22:d8:6d:48:5f:d0:a0:fd:ce:fb:40:2e:a6:6d:56:cd:ce: 7d:87:a9:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8AxKZcIDAoSiI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk MzAxOGY4ZmQtYzA4Mi00NDI2LWJiZjgtM2ZlOTYzMWU4ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU33BYRkaTJQa3KW8yRLClIe76cm2XZD6SMS Mqfd6Treq6CnkXcl0oTzzovaDLyGHR+fXa+ESSFxDRiMajtj6kKWvbMtAi4q9JO5 oFQcJOLjq3022EnoZaJrP53AbriWxJFpo0TDFg7L2/wQgeD4jAG7jNHCtSE6LfLx O/IB/4SpYEOnK/nVoIyj0VBvVK8PaNpGuRTzaDLepvkH1rhZlP0TNVVRTMYOxJtQ XIh1JF0nJqrAu0dTjdk12d9NHzhVVUgyqZ09PtkXDegZ5q5AaoYCR/TlJzOsCjvo 3BiMGoilZ6encxCiMpUNH9BXd6Gd0ovicRnduOkVHLtF6dcU/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXW/0jmdEg+8W8tXU11wnY0G4eJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWM2MDEzMWMtNWIyNS0z NzljLTk5ODktMWRiNGI5MzkwZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlNRSotAVzGdkBP6zb8bZDzdVshq7DzxtoMBmWRJ6Fj5X8NdztuN2HA 5DQF5/RA/MVospVM2Dp/pqzDN9fGgay+fsSz2+X4BZ9lNqL2qd1aN+89miI7Bwds XtMl7v9QSAT3+a4QoswisttDYFvsXA9P31TU2WUQGwWUTlr1QHtkaz+cIuZKaIyz xZldR5VILCPmfPq4vtulJ/TsBuKS4TZX8KeXHilOQn/+SqI8oEQJISR+RdbsdoRf GXzHIpWXxe3FnLVJeXLZ9JyCk4wB9xP79ikP0t9IDU44VrIGhtBl8uSLSI8VLQuG tSQi2G1IX9Cg/c77QC6mbVbNzn2HqXk= -----END CERTIFICATE-----Generated at Sun Feb 16 20:49:41 2025 by rpki-client